GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-exporter, cert-manager-cmctl, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: grafana, xeol, flux, kyverno-notation-aws, external-secrets-operator, terraform, juicefs, nuclei, yunikorn-k8shim, seaweedfs, frp, ratify, k6, sftpgo-plugin-auth, gitlab-runner, kyverno, telegraf, percona-server-mongodb-operator, trufflehog, rancher-webhook, zot,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, opentelemetry-operator, cert-manager-csi-driver, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer, percona-server-mongodb-operator, mariadb-operator...

GO-2026-4958 vulnerabilities

Vulnerabilities for packages: cilium-cli, kwok, rancher-fleet, kpt, trivy, eksctl, istio, kubescape, kubevela, k3s, verticadb-operator, argo-rollouts, kiali, trivy-operator, consul-k8s, postgres-operator, sonobuoy, falcoctl, gitlab-runner, cilium, gitlab-kas, argocd-image-updater, kubernetes,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: amass, cosign, conftest, docker-credential-ecr-login, actions-runner-controller, crossplane-provider-aws-ec2, nerdctl, opensearch-k8s-operator, stakater-reloader, gitleaks, swagger, litefs, juicefs, k3s, bank-vaults, calico, kuma,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: cosign, nerdctl, grafana-alloy, flyte, istio, kubescape, k3s, bank-vaults, caddy, vexctl, podman, falcoctl, dagdotdev, zot, apko, boring-registry, skaffold, sigstore-scaffolding, cert-manager-istio-csr, timestamp-authority, distribution, step, zarf,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kwok, istio, kubescape, cluster-api-provider-vsphere, k3s, rke2-cloud-provider, calico, kuma, fluent-operator, cluster-api-aws-controller, zot, flux-helm-controller, kubernetes-csi-external-resizer, cert-manager-istio-csr, opentelemetry-operator, cluster-autoscaler,...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager-csi-driver, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer, percona-server-mongodb-operator, mariadb-operator...

Open Babel has out-of-bounds write in CSR PadString (title field)

SummaryA memory-safety vulnerability in Open Babel's CSR parser allowed anout-of-bounds write when reading a crafted input file. DetailsThe flaw was in the PadString helper used to handle the CSR titlefield. A title longer than the fixed destination buffer caused theparser to write past the end o...

PYSEC-2026-2788 Open Babel has out-of-bounds write in CSR PadString (title field)

Summary A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the PadString helper used to handle the CSR title field. A title longer than the fixed destination buffer caused the parser to write past the...

PYSEC-2026-3214 Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

Impact The implementation of tf.rawops.SparseTensorToCSRSparseMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf indices = tf.constant53, shape=3, dtype=tf.int64 values =...

PYSEC-2026-1018 Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

Impact The implementation of tf.rawops.SparseTensorToCSRSparseMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf indices = tf.constant53, shape=3, dtype=tf.int64 values =...

SUSE CVE-2022-41793

An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

PT-2026-55149

Summary A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the PadString helper used to handle the CSR title field. A title longer than the fixed destination buffer caused the parser to write past the...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cadence-fips, kubo, crossplane-provider-azure-netapp, neuvector-sigstore-interface, grafana-pyroscope-fips, kcp-fips, kubedock-fips, k6-operator-fips, agentbeat-fips, eck-operator-fips, xeol, flux-image-reflector-controller, grype, knative-kafka-broker, packer-fips,...

CVE-2026-54099

A flaw was found in the Windows Machine Config Operator WMCO for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A...

CVE-2026-54099

The CVE-2026-54099 entry describes a vulnerability in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift. The WICD CSR auto-approver only checks that a CSR’s organization includes system:wicd-nodes and does not reject extra organization values such as system:masters. A compromised W...

CVE-2026-54099

A flaw was found in the Windows Machine Config Operator WMCO for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A...

EUVD-2026-38233

A flaw was found in the Windows Machine Config Operator WMCO for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A...

CVE-2026-29644

XiangShan open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 has improper gating of its distributed CSR write-enable path, allowing illegal CSR write attempts to alter custom PMA Physical Memory Attribute CSR state. Though the RISC-V privilege...